$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer (raw, json) Hash identifier: 89pFWMNbz7LZrqmpiVF5/NY6EbPALjcdH/J+rH0u2F4= Subject key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 128E86A0F8E0B3C3833669FF2D24E5EBE87860 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft caRepository: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 05:58:09 +0000 Certificate not after: Thu 01 Apr 2027 06:03:09 +0000 Subordinate resources: IP: 157.66.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8e:86:a0:f8:e0:b3:c3:83:36:69:ff:2d:24:e5:eb:e8:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 2 05:58:09 2026 GMT Not After : Apr 1 06:03:09 2027 GMT Subject: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:2b:81:42:64:86:52:c5:8c:84:6e:46:06: ce:9b:d4:68:89:75:99:35:a4:dc:98:9e:2e:42:f0: 92:e0:ea:af:18:4d:4b:5b:9f:cc:4b:1b:22:6e:8b: ea:2e:0a:f5:40:27:49:d9:2c:00:6c:37:47:92:16: 23:2b:7e:d3:38:10:74:58:b1:c8:ca:a1:c3:b2:1f: 85:0d:87:90:ef:08:f2:f9:10:1f:3a:fa:f7:4c:47: ae:d3:42:78:ca:3a:5c:f7:69:e6:b4:f0:d1:9f:d3: 79:fe:0e:35:cd:01:fc:15:1b:c6:be:6e:de:51:4a: 52:4b:88:06:20:17:c1:f6:43:66:d6:db:17:fe:13: 0e:44:70:fa:d3:5c:e9:76:8d:b3:b2:52:69:76:b4: 5a:c8:66:e1:5e:56:f6:6c:9f:ef:cf:b9:20:29:9b: 22:e5:11:7d:2f:19:fb:f9:e5:4b:48:e1:d2:a3:fe: 87:43:15:d0:83:16:da:d8:94:5b:90:ea:d6:97:e3: a0:30:9c:44:27:25:c4:d5:a1:17:9e:e0:bd:3b:06: 66:ad:72:c6:89:72:1d:55:c4:83:c9:7a:5d:20:de: aa:1b:8e:f6:2a:d6:f4:29:64:d1:02:3c:30:cb:0b: 3b:ce:93:6b:d9:cf:22:71:95:95:64:99:31:05:95: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:82:ae:95:bb:72:e7:68:cd:d7:e7:cf:7e:8b:8e:d2:9c:d2: e7:ad:3d:f1:f6:be:f1:59:c1:3b:98:db:44:ae:66:28:84:f9: e0:c7:66:65:94:21:2b:91:a6:51:b7:6f:9c:44:9f:d6:42:8d: 63:1b:f7:85:ea:81:b1:27:ab:26:1f:c5:70:ee:0f:16:13:39: 77:95:bf:1c:f4:12:bc:68:39:03:eb:77:e8:da:57:60:58:4f: 8c:e6:2b:85:6c:27:39:66:f3:24:a4:14:49:42:80:5a:37:99: e7:91:d8:88:a0:58:b2:5f:f2:29:68:61:60:49:6b:6a:30:f2: 3d:5f:07:a4:3a:1c:1b:85:bd:d8:65:68:43:ff:13:da:92:39: de:7d:6f:7c:86:08:71:d9:7f:35:92:11:82:36:ed:49:94:7c: 8c:5d:a9:80:32:47:42:d6:48:2e:b4:f3:9b:d2:d9:5c:50:45: c5:96:e9:7e:31:04:4c:24:50:24:8a:23:10:0b:54:83:52:6d: 7d:3a:bc:b6:f6:cc:ce:58:76:fb:24:60:67:dd:af:47:21:cf: e6:09:5d:52:71:9d:c2:d6:47:2f:85:a7:d4:a7:20:78:49:54: a6:48:4f:89:4b:67:0d:29:90:d3:a1:26:d0:15:83:06:65:9a: dc:2b:fa:aa -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITEo6GoPjgs8ODNmn/LSTl6+h4YDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDYwRjhCRTlDMTY2 MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQwHhcNMjYwNDAyMDU1ODA5WhcN MjcwNDAxMDYwMzA5WjAzMTEwLwYDVQQDEyg1MTMxNzQzRjVFOTVCQjBBRDVBRTYx QjBCREMxODg0QzEwMjFCNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRMrgUJkhlLFjIRuRgbOm9RoiXWZNaTcmJ4uQvCS4OqvGE1LW5/MSxsibovq Lgr1QCdJ2SwAbDdHkhYjK37TOBB0WLHIyqHDsh+FDYeQ7wjy+RAfOvr3TEeu00J4 yjpc92nmtPDRn9N5/g41zQH8FRvGvm7eUUpSS4gGIBfB9kNm1tsX/hMORHD601zp do2zslJpdrRayGbhXlb2bJ/vz7kgKZsi5RF9Lxn7+eVLSOHSo/6HQxXQgxba2JRb kOrWl+OgMJxEJyXE1aEXnuC9OwZmrXLGiXIdVcSDyXpdIN6qG472Ktb0KWTRAjww yws7zpNr2c8icZWVZJkxBZW+jQIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUUTF0P16VuwrVrmGwvcGITBAhtHYwHwYDVR0jBBgwFoAUYPi+ nBZiXEJLJp7gbGSoO6uFBtQwDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEv NjBGOEJFOUMxNjYyNUM0MjRCMjY5RUUwNkM2NEE4M0JBQjg1MDZENC5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvWVBp LW5CWmlYRUpMSnA3Z2JHU29PNnVGQnRRLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzFkNzU1MzQ3LTZiMWMtNDJjMS05ZjU0LWQ3ZWFiMjJlMTgyYy8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDct NmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1 QUU2MUIwQkRDMTg4NEMxMDIxQjQ3Ni5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AJ1CODANBgkqhkiG9w0BAQsFAAOCAQEAXYKulbty52jN1+fPfouO0pzS56098fa+ 8VnBO5jbRK5mKIT54MdmZZQhK5GmUbdvnESf1kKNYxv3heqBsSerJh/FcO4PFhM5 d5W/HPQSvGg5A+t36NpXYFhPjOYrhWwnOWbzJKQUSUKAWjeZ55HYiKBYsl/yKWhh YElrajDyPV8HpDocG4W92GVoQ/8T2pI53n1vfIYIcdl/NZIRgjbtSZR8jF2pgDJH QtZILrTzm9LZXFBFxZbpfjEETCRQJIojEAtUg1JtfTq8tvbMzlh2+yRgZ92vRyHP 5gldUnGdwtZHL4Wn1KcgeElUpkhPiUtnDSmQ06Em0BWDBmWa3Cv6qg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:05:11 2026 by rpki-client